CVE-2015-1271: Buffer Overflow
PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted PDF document that triggers a large memory allocation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1271?
CVE-2015-1271 has a severity rating that indicates it can lead to a denial of service due to a heap-based buffer overflow.
How do I fix CVE-2015-1271?
Update Google Chrome to version 44.0.2403.89 or later, and ensure your operating system packages are up to date according to vendor advisories.
What versions of Google Chrome are affected by CVE-2015-1271?
CVE-2015-1271 affects Google Chrome versions before 44.0.2403.89.
Are there any affected Linux distributions for CVE-2015-1271?
Yes, affected distributions include openSUSE 13.1, 13.2, Debian 8.0, and various Red Hat Enterprise Linux versions.
What type of vulnerability is CVE-2015-1271 categorized as?
CVE-2015-1271 is categorized as a denial of service vulnerability due to improper handling of out-of-memory conditions.